Overview

DomainTools turns domain and DNS data into threat intelligence that helps security teams detect, investigate, and prevent cyberattacks. By mapping the connections between domains, IPs, and digital infrastructure, DomainTools reveals the full story behind suspicious activity—before damage is done. Trusted by global enterprises and government agencies, DomainTools empowers analysts with the context and insights needed to respond faster, hunt smarter, and stay ahead of adversaries in an ever-evolving threat landscape.

  1. Iris Detect - Discover and monitor lookalike domains with unmatched speed and coverage. Threat Actors Move Fast. Detect Helps You Move Faster. Iris Detect is an Internet infrastructure detection, monitoring, and enforcement tool (UI and API) built on the industry’s fastest and broadest domain discovery engine and the largest databases of domain data. Capturing key data on new domains and risk-scoring them within minutes of discovery, Detect is a game-changer for brand managers, digital risk and fraud prevention teams, and network defenders.
  2. Iris Enrich - Robust API including Whois, DNS, SSL certificate, and risk scoring elements to enrich indicators at scale. Enrich on-network indicators at-scale. The DomainTools Iris data set helps analysts, detection engineering teams, threat hunters, and other practitioners obtain critical situational awareness on domains or IP addresses observed in the protected environment. Whois, DNS, SSL certificate, and risk scoring elements help build out the needed context for the appropriate disposition of indicators. Iris Enrich APIs are REST-based and OpenAPI compatible, making it easy to incorporate into your own internal tools.
  3. Iris Investigate -  Map connected infrastructure to get ahead of threats - Track the wolf;Find the pack. Iris Investigate combines enterprise-grade domain intelligence and risk scoring with industry-leading passive DNS data. An intuitive web interface and corresponding APIs query these data sources to help security teams quickly and efficiently investigate potential cybercrime and cyberespionage.
S.No Product Name Description User Accounts Annual Unit Subscription Price
 1  Iris Investigate Bundle 500
  • Iris Investigate UI & API 500 Queries / Month
  • Iris Investigate Integrated Risk Score
  • Iris Investigate Integrated pDNS UI
  • DNSDB API Access 10 Queries / Day
  • DNSDB Scout UI Access
  • Whois History API 500 Records / Month
  • Hosting History API 500 Queries / Month
  • Reverse Whois API 250 Queries / Month
  • Domain Profile API 500 Queries / Month
  • Parsed Whois API 500 Queries / Month

 10
 20
 50
 More than 50

 3,500,000
 3,900,000
 4,100,000
 Call
 2  Iris Investigate Bundle-1000
  • Iris Investigate UI & API 1,000 Queries / Month
  • Iris Investigate Integrated Risk Score
  • Iris Investigate Integrated pDNS UI
  • DNSDB API Access 50 Queries / Day
  • DNSDB Scout UI Access
  • Whois History API 1,000 Records / Month
  • Hosting History API 1,000 Queries / Month
  • Reverse Whois API 1,250 Queries / Month
  • Domain Profile API 1,000 Queries / Month
  • Parsed Whois API 1,000 Queries / Month
 10
 20
 50
 More than 50
 3,720,000
 4,017,000
 4,300,000
 Call
 3  
Iris Investigate Bundle-2000
  • Iris Investigate UI & API 2,000 Queries / Month
  • Iris Investigate Integrated Risk Score
  • Iris Investigate Integrated pDNS UI
  •  DNSDB API Access 50 Queries / Day
  • DNSDB Scout UI Access
  • Whois History API 2,000 Records / Month
  • Hosting History API 2,000 Queries / Month
  • Reverse Whois API 1,500 Queries / Month
  • Domain Profile API 2,000 Queries / Month
  • Parsed Whois API 2,000 Queries / Month
 10
 20
 50
 More than 50
 3,900,000
 4,200,000
 4,600,000
 Call
 4  Iris Investigate Bundle-3000
  • Iris Investigate UI & API 3,000 Queries / Month
  • Iris Investigate Integrated Risk Score
  • Iris Investigate Integrated pDNS UI
  • DNSDB API Access 100 Queries / Day
  • DNSDB Scout UI Access
  • Whois History API 3,000 Records / Month
  • Hosting History API 3,000 Queries / Month
  • Reverse Whois API 3,000 Queries / Month
  • Domain Profile API 3,000 Queries / Month
  • Parsed Whois API 3,000 Queries / Month
 10
 20
 50
 More than 50
 4,100,000
 4,500,000
 5,100,000
 Call
 5  
Iris Investigate Bundle-5000
  • Iris Investigate UI & API 5,000 Queries / Month
  • Iris Investigate Integrated Risk Score
  • Iris Investigate Integrated pDNS UI
  • DNSDB API Access 100 Queries / Day
  • DNSDB Scout UI Access
  • Whois History API 5,000 Records / Month
  • Hosting History API 5,000 Queries / Month
  • Reverse Whois API 5,000 Queries / Month
  • Domain Profile API 5,000 Queries / Month
  • Parsed Whois API 5,000 Queries / Month
 10
 20
 50
 More than 50
 4,400,000
 5,000,000
 7,000,000
 Call